index=application-prod operation IN ("PaymentExecuted", "PaymentCreated") earliest>-4m latest<-2m 
                | transaction paymentExtId startswith=("operation":"PaymentCreated") 
                | eval provider=mvindex('payment.provider.name',-1) 
                | eval method=mvindex('payment.method.name',-1) 
                | eval merchant=mvindex('payment.merchant.name',-1) | eval p="n"
                | stats count AS CreatedA, count(eval(operation="PaymentExecuted")) AS ExecutedA by method, provider, merchant 
                | eval SuccessRatioA=ExecutedA/CreatedA
                | append [
                        search index=application-prod operation IN ("PaymentExecuted", "PaymentCreated") earliest>-2m 
                                | transaction paymentExtId startswith=("operation":"PaymentCreated") 
                                | eval provider=mvindex('payment.provider.name',-1) 
                                | eval method=mvindex('payment.method.name',-1) 
                                | eval merchant=mvindex('payment.merchant.name',-1) | eval p="n"
                                | stats count AS CreatedB, count(eval(operation="PaymentExecuted")) AS ExecutedB by method, provider, merchant 
                                | eval SuccessRatioB=ExecutedB/CreatedB
                ] 
                | where CreatedA<10 AND CreatedB<10
                | stats latest(SuccessRatioA) AS SuccessRatioA, latest(SuccessRatioB) AS SuccessRatioB,  latest(CreatedA) AS CreatedA, latest(CreatedB) AS CreatedB  by method, provider, merchant
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX